Vendor Regulatory Evidence
Server Details
Resolve a vendor and buy normalized public OSHA, EPA, and SAM exclusion evidence with provenance.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
Available Tools
3 toolsbuild_vendor_evidence_packageCRead-onlyIdempotentInspect
Purchase a classified, source-backed vendor regulatory evidence package.
| Name | Required | Description | Default |
|---|---|---|---|
| vendor_token | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description directly contradicts the readOnlyHint annotation: 'Purchase' strongly implies a state-changing, potentially paid transaction, while readOnlyHint declares the operation has no side effects. This is a serious annotation contradiction that could mislead an agent about cost, reversibility, and safety.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is short and front-loaded with the action, containing no filler. However, it is under-specified rather than deliberately structured, so its brevity is a result of minimalism rather than efficient communication.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, a single undocumented parameter, and no explanation of cost, delivery, return value, or side effects, the definition is far from complete. The unresolved conflict between 'Purchase' and readOnlyHint further prevents an agent from safely understanding what will happen.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the description never mentions vendor_token, its meaning, format, how to obtain it, or its role in the purchase. The agent is left with only the parameter name and type, so the description adds no useful parameter-level information.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a concrete verb ('Purchase') and a specific resource ('classified, source-backed vendor regulatory evidence package'), so the core purpose is identifiable. However, it does not explicitly distinguish this from sibling tools like get_vendor_regulatory_records or resolve_vendor, and the name says 'build' while the description says 'purchase'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no guidance on when to use this tool versus the sibling tools, nor any mention of prerequisites such as needing a vendor token or when an evidence package is appropriate. An agent would have to infer usage entirely from the tool name and the minimal description.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_vendor_regulatory_recordsBRead-onlyIdempotentInspect
Purchase normalized OSHA, EPA ECHO, and public SAM exclusion records for a resolved vendor.
| Name | Required | Description | Default |
|---|---|---|---|
| vendor_token | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description says 'Purchase,' which implies a transactional side effect such as a financial charge or acquisition action. This directly conflicts with the annotations readOnlyHint=true and idempotentHint=true, which state the operation is read-only and repeatable without side effects. This is a serious annotation contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is one dense sentence that front-loads the key information: action, data sources, normalization, and prerequisite. There is no redundant or filler wording.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a single-parameter tool, the description is almost sufficient, but the misleading 'Purchase' wording leaves the agent uncertain about side effects, cost, or whether this is truly read-only. With no output schema and no clarification of the purchase semantics, the definition is not complete enough for reliable invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It partially does by linking the vendor_token to a 'resolved vendor,' but it does not explain the token format or how it is obtained. The guidance is helpful but minimal.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific operation—purchase/obtain—and names the exact resources: normalized OSHA, EPA ECHO, and public SAM exclusion records. It also scopes the target to a 'resolved vendor,' which distinguishes it from sibling tools like resolve_vendor or build_vendor_evidence_package.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'for a resolved vendor' clearly establishes the prerequisite context: the vendor must already be resolved, implying use after resolve_vendor. It does not explicitly name alternatives or exclusions, but the context is clear enough for an agent to decide when this tool is relevant.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
resolve_vendorARead-onlyIdempotentInspect
Resolve a U.S. vendor before payment; ambiguity never creates a charge.
| Name | Required | Description | Default |
|---|---|---|---|
| uei | No | ||
| city | No | ||
| state | Yes | ||
| aliases | No | ||
| zip_code | No | ||
| epa_frs_id | No | ||
| company_name | Yes | ||
| street_address | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover readOnly, openWorld, and idempotent behavior. The description adds a distinct behavioral guarantee that ambiguity never creates a charge, which is exactly the kind of high-value context annotations do not express. There is no contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single compact sentence with two clauses; the main purpose is front-loaded and the charge-behavior clause earns its place. There is no fluff or repetition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite strong annotations, the lack of an output schema and zero parameter documentation means an agent cannot predict the return shape or know how to supply fields like aliases, uei, or epa_frs_id. The description gives a high-level contract but not enough to invoke the tool correctly in all cases.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema has no property descriptions (0% coverage) and the tool description does not explain company_name, state, aliases, uei, or any other parameter. An agent must infer meaning from field names alone, which is insufficient for eight parameters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action and resource: 'Resolve a U.S. vendor before payment.' This clearly distinguishes the tool from its siblings, which build evidence packages or fetch regulatory records, and conveys that its core job is vendor identity resolution.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'before payment' gives a clear when-to-use context, and 'ambiguity never creates a charge' adds a decision-relevant safety condition. However, it does not explicitly name alternatives or state when not to use the tool, so it falls just short of full usage guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Frequently Asked Questions
Claiming proves that you control a remote MCP connector. It does not move, proxy, or interrupt the server.
Open the connector listing, choose Claim ownership, and sign in to Glama.
Complete one verification method:
GitHub identity — fastest for official registry listings. For a namespace such as
io.github.alice/server, link the matching GitHub user or an account that owns the GitHub organization, then choose Claim with GitHub.HTTP challenge — works when you can deploy a public file. Generate a token, publish the exact JSON Glama shows at
/.well-known/glama.jsonon the same origin as the connector, then choose Check HTTP challenge.DNS challenge — works when you control DNS but cannot change the server. Generate a token, create the exact TXT record Glama shows, wait for it to propagate, then choose Check DNS challenge.
After verification, Glama sends a confirmation email and gives you access to listing details, thumbnails, health checks, and analytics. Keep the HTTP file or DNS record in place: Glama periodically checks it and ownership remains verified while the token is discoverable.
The HTTP ownership file has this structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"claim": "glama_claim_..."
}Claim tokens are opaque, stable, and bound to the signed-in Glama account. They contain no email address or other personal information. If Glama can no longer discover a verified HTTP or DNS token, it starts a seven-day grace period before removing claim-based access. Restore the same token during that period to keep ownership verified. Never publish an email address, Glama session token, GitHub token, or connector credential as ownership proof.
If verification fails, confirm that you copied the current token exactly. The HTTP file must be public, return valid JSON with a successful HTTP response, and stay on the connector's origin. DNS changes may need more time to propagate. A claim cannot transfer to a different origin or hostname: if the connector target changes, Glama starts the grace period and the new target must be claimed separately after the previous claim is released.
For a connector linked to the official MCP Registry, registry updates continue to replace its name, description, and URL by default. After claiming, open Manage connector and enable Use Glama listing details as the source of truth if edits made on Glama should be preserved. Categories and thumbnails are always managed on Glama; registry linkage and technical connection settings continue to sync.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
To improve your MCP server's ranking:
Claim ownership of the server listing
Complete the server profile with an accurate description and thumbnail
Provide a test profile so Glama can connect to and evaluate the server
Keep tool definitions clear and complete to earn a high Tool Definition Quality Score (TDQS)
Route real usage through the Glama Gateway; more recorded successful server uses also improve the ranking
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Related MCP Connectors
Official evidence for OFAC, FDA, USAspending, Federal Register, counterparty and batch checks.
Screen a business or person for exclusions, debarment, and sanctions (SAM.gov, OFAC).
Screen a business for federal exclusions & sanctions: OFAC SDN, HHS-OIG LEIE, SAM.gov debarment.
Official-source US business, permit, and WHOIS evidence via read-only MCP tools.
Related MCP Servers
- AlicenseNot gradedqualityCmaintenanceAnalyzes early government notices to produce an evidence-backed map of plausible supplier companies with deterministic scoring and exact citation validation.MIT
- FlicenseNot gradedqualityBmaintenanceSource-provenanced US federal healthcare provider data over MCP. Resolve any NPI or CCN across NPPES, OIG LEIE, SAM.gov, state Medicaid exclusions, CMS PECOS, Care Compare, and Open Payments — every field carries a 14-field provenance contract, and an "excluded or compromised anywhere" check runs on every lookup.
- AlicenseNot gradedqualityCmaintenanceEnables AI agents to research U.S. companies and associated people using official state registries and free regulatory datasets, with normalized evidence and optional browser automation.MIT
- AlicenseNot gradedqualityCmaintenanceScreens individuals and entities against the OIG LEIE exclusion list, returning candidate matches that require human verification.MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.
TDQS
build_vendor_evidence_package and get_vendor_regulatory_records both result in purchasing regulatory evidence, with only packaging and record type distinguishing them, which could lead to misselection. resolve_vendor is clearly distinct as a prerequisite, but the two purchase tools still overlap.
All tool names follow a consistent snake_case verb_noun pattern: build_vendor_evidence_package, get_vendor_regulatory_records, resolve_vendor. The verbs and nouns are predictable and clearly domain-specific.
Three tools is on the low side but sufficient for a focused resolve-then-purchase workflow. The count is reasonable and not excessive, though a few more operations could round out the offering.
The set covers resolving a vendor and purchasing two types of evidence, but lacks any way to retrieve previously purchased packages, check purchase status, or list available evidence types. These are notable gaps for a vendor evidence service.